Question & Answer
Question
How do you change the DNS server IP address in QRadar 7.3.1, 7.3.2, and 7.3.3?
Cause
A common reason for the DNS server IP address to change is it was issued a new IP address. When this occurs, it is important that the QRadar environment is updated with the DNS server IP address.
Answer
Starting with QRadar version 7.3.1, modifying DNS entries by using the command line would not be persistent. If the appliance is restarted, the entry updates revert to their original DNS settings. For QRadar 7.3.1, 7.3.2, and 7.3.3 the supported method is to change the DNS entries is by using qchange_netsetup. In an All in One appliance, the procedure is straight forward. If you have a distributed deployment, you need to unmanage all appliances requiring DNS updates before you can run qchange_netsetup. Using qchange_netsetup in a large deployment might result in a timely maintenance period.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"Networking","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.1;7.3.2;7.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
09 February 2021
UID
ibm11282288